Velogether Privacy Policy

Last updated: 1 March 2027

The short version: we collect what the app needs to help you find people to ride with, and nothing more. No ads, no selling of data, no tracking. Your exact location is only used when you use a feature that needs it, and you can delete your account and all its data in the app at any time.

1. Who we are

Velogether is run by Računalniške dejavnosti Matic Krašek s.p., Zaloše 11, 4244 Podnart, Slovenia (“we”, “us”). We are the controller of your personal data.

Privacy questions and requests: privacy@velogether.com

2. What this policy covers

This policy covers the Velogether mobile app, the services behind it, the early access signup on our website (see “Website signups” in section 3), the help page on our website (see “Help and support” in section 3), and the testers' page before the launch (see “Testing page” in section 3). You must be 18 or older to use Velogether. Children can come along on family rides with a parent, but they don't have accounts, and we don't collect information about them other than how many kids a family brings (see section 3).

3. What data we collect and why

Your account

Email address: to sign you in with a one-time code, and to contact you about your account.
First and last name: other riders see your first name and the first letter of your last name; friends see your full name.
Date of birth: to check that you are 18 or older. It is never shown to others. If you switch on “Show my age”, others see your age in years (off by default).
Gender (optional): only used so that women can post and join women-only rides. Never shown to others.
Home area: the town you ride from, with its position rounded to about 1 km, to show rides near you. The town's name is shown on your profile. We never store your exact home address on our servers.
Riding preferences: the types of rides and levels you're interested in.

Your profile (optional)

Profile photo: shown to everyone, or, if you choose, only to riders on the same ride, riders you have ridden with, and friends.
Short bio and languages you speak.
Your bikes: type, brand, model and the other details you enter. Shown to riders on the same ride, riders you have ridden with, and friends. If you add a brand or model that isn't on our list yet, it may be added to the list for everyone, without your name.
Stats worked out from your rides: rides done, rides hosted, how many different people you have ridden with, and when you joined.

Rides you post or join

Ride details: type, title, time, route description, level and the other details you enter.
Meeting point and end point: the exact places you choose. Only you and riders who joined see the exact places; everyone else sees an area of about 1 km.
Routes: a route you attach to a ride (imported from a GPX or FIT file, suggested by the app, or from your saved routes). Riders who joined see the whole route; everyone else sees it without its first and last kilometre or so, and routes shorter than 3 km aren't shown to them at all.
My routes: routes you save for later. Only you see them, unless you share one: then anyone with its link sees the route line, name, distance and climbing (in the Velogether app, also your first name and the first letter of your last name), until you stop sharing or delete the route. Your notes and saved meeting points are never shared.
Joining: which rides you joined, asked to join or wait for, and the optional message you send with a request.
Invites: which friends you invite to a ride, and whether they joined or declined.
Questions (Q&A): questions you ask on a ride's page, and the answers of the host or a co-host. They are public: everyone who can see the ride sees them, with the asker's first name and the first letter of their last name.
Family rides: how many adults and kids come with you. We store only these numbers, nothing else about children.
Weather: we store the forecast for each ride's meeting area and start time. This doesn't involve any data about you.

Ride day

Check-in (“I'm here”): when you press the button, your phone checks its location once. We store the time and how many metres you were from the meeting point. We do not store your coordinates.
Finished: when you finished the ride (by pressing the button, or automatically at the planned end).
The host's answers for riders who didn't check in (was there / joined later / no show).
Leaving late: if you leave a ride less than 2 hours before the start, we note it for your reliability (see below).

After the ride

Ratings: riders who were on a ride can rate the host and the ride (1 to 5 stars and optional tags) for 7 days. Ratings are anonymous: the host only sees an average, and only once there are at least 3 ratings. Nobody sees who gave which rating.
Was the host there? If the host didn't check in, riders are asked whether they were there.
Group tags: the host can give the whole group positive tags (such as “solid group”). They are counted on the profiles of everyone who rode.
Reliability: from late leaves, no-shows and a host's late cancellations in the last 12 months, we work out a reliability score (only once you have joined at least 10 rides). Only you see it. If it gets high, the app gives you a friendly warning first; if it gets higher still, hosts of rides you join see a short note. The score is never used to block you from anything.

Chat

What you send in a ride's chat: messages, photos, locations you share, and reactions. Only the host and the riders on that ride can see them.
Whether you have read, muted or deleted a chat.
Photos are made smaller on your phone before they are sent. Location data inside the photo files (EXIF) is not kept. A location is only shared when you choose a place on the map and send it.
You can delete your own messages at any time; the host can delete any message in their ride's chat. A deleted message's photos are deleted too.

Friends and ride alerts

Friends: your friend code (used in your QR code and invite link), friend requests, your friends, and which friends' new rides you want to hear about.
Invites: if you name who invited you to Velogether (within 14 days of signing up), we store who it was and when the invite counted (after 3 rides with 3 different people). The person who invited you only sees how many of their invites ride, not who.
Private messages: the messages, photos, locations and reactions you send to a friend, and whether you have read or muted a conversation. Only you and that friend can read them. If you stop being friends, the conversation stays but nobody can write in it; if you block someone, it disappears for you.
Ride alerts: the alerts you set up (for example “gravel rides within 30 km”), so we can tell you about matching new rides.

Safety: reports and blocks

Reports: when you report a rider, a ride, a message (in a ride chat or a private message), a question or an answer, we store your report (the reason and your optional note) and a copy of what you reported, so we can review it even if it is changed later. The person you report is never told who reported them.
Repair station reports: when you report a repair station on the map (not there any more, broken, not a repair station, wrong position), we store your report with your account. Other riders never see who reported a station. Tapping Still here only updates the station's "last checked" date.
Repair stations you add: the position, what the station has and its photo, stored with your account. Other riders never see who added a station. The photo is made smaller on your phone, and location data inside the photo file (EXIF) is not kept.
Blocks: who you have blocked. Blocked riders aren't told.
Decisions about your account: if a host removes you from a ride, or if after reviewing reports we warn you, remove something you posted, or suspend or delete your account, we store the decision, the reason, our note to you and a copy of what was removed. We tell you in the app and by email, and you can appeal in the app (You → Account status) or by replying to the email.

Help and support

Help & feedback: when you write to us in the app, we store your messages and the screenshots you add, the app version, your phone's model and system version, and the app's language, so we can answer you and fix problems. Our replies reach you in the app and by email.
“Can't sign in?” form on velogether.com/help: your name, the email address of your account, the address where we can reach you, and your message. We use them only to help you back into your account, and send a confirmation and our replies to the address you gave.
Checking that an account is yours: before we move an account to a new email address, we ask about details in it (for example since when you have it, your bikes or recent rides). When we move it, we email both the old and the new address.

Notifications

A push token (an address for your phone, given by Apple or Google), with your phone's language and time zone, so we can send you notifications in your language and with the right times.
Your notification settings, and a record of the notifications we sent you.

Your location

The app asks for your location only while you use it, and only for these features: setting your home area, showing your position on the map, choosing a meeting point or end point, sharing a location in a chat, and checking in. The app never uses your location in the background and never tracks your rides.

Camera and photos

The app uses the camera only when you take a profile photo, a photo for a chat or a repair station, or scan a friend's QR code. When you choose photos from your phone, the app only gets the photos you pick. When you save a chat photo to your phone, the app adds it to your gallery without reading anything else in it.

Stored only on your phone

Some things never leave your phone: your privacy zones (your private home and work locations, used to warn you when a meeting point is close to them and to leave them off the routes you attach), your language choice, units (km or miles), light or dark mode and colour theme, and which ride changes you have already seen.

Website signups

If you leave your email in the “Notify me” form on velogether.com, we store your email address and what you chose to add: your town, the type of riding you mostly do, whether you'd like to test the app, and the language of the page. We use them only to email you about testing and the launch, and to choose testers. We send one confirmation email straight away; its “Remove me” link deletes your signup. This is separate from an account in the app.

Testing page

Before the launch, the testers we invite use velogether.com/testing. You log in with your app account (the same email code). We store that you're a tester (your email, the name and language you gave us), the feedback, comments and screenshots you send, your “Me too”s, your checklist ticks, and when you last opened the page. All testers see all feedback, comments and screenshots, with the name of whoever sent them; only you and we see your checklist. We use this only to find and fix problems before the launch. We email you our replies to your feedback and the messages we choose to email to all testers. While you're on the tester list, the app also records how long you have it open each day, and we count what you do in it (rides hosted and joined, riders checked in, messages sent, ratings, reports). These are numbers only; we don't read your messages for this. We use them to see which parts of the app were tested and to thank the testers who helped the most. Screenshots show whatever was on your screen, so check them for anything private before you upload them.

What we don't do

No advertising, and no selling or renting of your data to anyone.
No analytics or tracking tools in the app.
No automated decisions about you that have legal or similarly significant effects.

4. What other riders can see

Everyone: your first name and the first letter of your last name, your profile photo (unless you limit it), your home town, the ride types and levels you like, your bio, languages and age (if you switched it on), your stats, the badges you show on your profile (unless you hide them; your progress stays private), group tags and host rating, the rides you host (with the approximate meeting area and the route without its start and end), the questions you ask on rides they can see, or your answers as the host or a co-host, and whether you co-host a ride.
Riders on the same ride: also your bikes, the exact meeting point, the whole route, who joined and checked in, the host's answers about who came, and everything in that ride's chat.
Riders you have ridden with: also the rides you did together.
Friends: also your full name.
Hosts of rides you join: a short note if your reliability is very low (see “After the ride”).
Never shown to other riders: your email, date of birth, gender, exact home, privacy zones, reliability score, individual ratings, reports, blocks, settings, your conversations with our support, and decisions about your account.

5. Services we use

We use these providers to run the app. They process data on our behalf and only for these purposes.

Provider	What for	Data	Where
Supabase	Database, sign-in, file storage (photos), our servers	All account, ride and chat data described above	EU (Frankfurt, Germany)
Resend (Resend, Inc.)	Sending sign-in codes, website signup emails, testing page emails and support emails	Your email address; for testing and support emails also their text	USA
Expo (650 Industries, Inc.)	Delivering notifications	Push token, notification text	USA
Google Firebase Cloud Messaging / Apple Push Notification service	Delivering notifications to Android / iPhone	Push token, notification text	USA / worldwide
Photon by komoot	Place search and place names	Your search text, or the position of a point you pick; your IP address	Germany
Overpass API (OpenStreetMap)	Suggesting public meeting spots	The map area around a meeting point; your IP address	Germany
OpenFreeMap	Map images	The map area you look at; your IP address	EU
GraphHopper	Suggesting routes	The start and end points you placed, the ride type and the distance you want. Sent from our servers, without your name or IP address	Germany
MET Norway (Norwegian Meteorological Institute)	Weather forecasts for rides	A ride's meeting area, rounded to about 1 km. Sent from our servers, without any data about riders	Norway
Your phone's built-in geocoder (Google or Apple)	Place names, if the above isn't available	The position of a point	Depends on your phone

Where data leaves the EU and EEA (Resend, Expo, Google, Apple), the transfer is protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

When you tap “Open in Maps” on a meeting point or a shared location, that point opens in your maps app or on Google Maps, under their own privacy policy.

6. Legal bases

Providing the service you signed up for (GDPR Art. 6(1)(b)): your account and profile, rides, routes, joining, invites, check-in, chat, questions (Q&A), friends, ride alerts, notifications, and help and support (including getting you back into your account).
Our legitimate interests (Art. 6(1)(f)): keeping the app safe, trustworthy and working, preventing abuse, and the 18+ check. This includes ratings, group tags, the reliability score, reports, blocks, and warnings, removals and suspensions: they help riders know what to expect and keep people safe on rides. You can object to this (see section 8).
Legal obligations (Art. 6(1)(c)): telling you why we removed something you posted or restricted your account, and handling your appeal, as the EU Digital Services Act requires.
Your consent (Art. 6(1)(a)): optional information such as gender, and the location, camera, photo and notification permissions on your phone. You can withdraw consent at any time, in the app or in your phone's settings. Also website signups: you can withdraw by tapping “Remove me” in the confirmation email, or by emailing us. And the testing page: you take part because you agreed to test, and you can ask us to remove you at any time.

7. How long we keep data

Account, profile, rides, check-ins, ratings: as long as you have an account. They make up your ride history.
Saved routes, bikes, friends, ride alerts: until you delete them, or your account.
Private messages, with their photos: deleted after 2 years. You can delete your own messages at any time; deleting a conversation clears it only for you.
Ride chats, with their photos, locations and reactions, and questions (Q&A): deleted 12 months after the ride. A message or question you delete is removed at once. Once a ride is over, you can delete its chat from your list: it's cleared only for you, and the other riders keep it.
Reliability: only the last 12 months count.
Records of sent notifications: deleted after 90 days.
Reports: kept for 2 years after we have dealt with them, so we can recognise repeated abuse, even if the accounts involved are deleted.
Repair station reports: deleted 1 year after they have been dealt with.
Support conversations (messages and screenshots, from the app or the help page): deleted 2 years after the conversation is done.
Decisions about your account (warnings, removals, suspensions): 2 years, and as long as a suspension lasts, or until you delete your account.
Our team's record of what it did (for example who suspended an account and why, which can include the account's name and, for an account we deleted, its email address): 2 years, so we can recognise repeated abuse.
Copies of the emails our support sends you: 90 days.
Push token: until you log out on that phone or delete your account.
Website signups: until 1 June 2027 (3 months after the launch), or until you tap “Remove me” in the confirmation email.
Testing page: everything, screenshots and time in the app included, until 1 June 2027 (3 months after the launch). You can delete your own feedback until we reply to it, and your comments at any time.
When you delete your account, we delete your profile and profile photo, bikes, the rides you hosted, your participation, check-ins, ratings, chat messages and photos, private conversations, questions, saved routes, friends, alerts, blocks and settings, your support conversations and decisions about your account, and your feedback and comments on the testing page. Upcoming rides you host are cancelled first, so their riders are told. Repair stations you added stay on the map with their photos, without any link to you. Deleted data may remain for a short time in our hosting provider's backups before they are overwritten.

8. Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format.

Correct: You → Edit profile. Your email: You → Settings → Email (we send a code to the new address and let the old one know it changed).
Delete: You → Settings → Delete account. This deletes everything immediately. Without the app: velogether.com/help/#delete.
Can't sign in: use the form on velogether.com/help.
Object (for example to the reliability score): email us, and we will stop unless we have a compelling reason, such as keeping riders safe.
Everything else (for example a copy of your data): email privacy@velogether.com. We answer within one month.

You can also complain to the Slovenian data protection authority: Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or to the authority in your own EU country.

9. Security

Data is sent encrypted (HTTPS). On our servers, access rules make sure each rider can only read what they're allowed to see (for example, exact meeting points only for riders on that ride). Chat photos are stored privately, and the links the app uses to show them stop working after an hour. Only the people on our team who handle support and reports see the account details they need for it (for example your email address or a reported message); what each of them may do is limited, and every action is logged. No system is perfectly secure; if a data breach affects you, we will tell you and the authorities as the law requires.

10. Changes to this policy

If we change this policy, we update the date at the top. If the change is important, we tell you in the app before it applies.

11. Contact

Računalniške dejavnosti Matic Krašek s.p., Zaloše 11, 4244 Podnart, Slovenia
privacy@velogether.com

Politika zasebnosti Velogether

Zadnja sprememba: 1. marec 2027

Na kratko: zbiramo le tisto, kar aplikacija potrebuje, da najdeš družbo za kolesarjenje, in nič več. Brez oglasov, brez prodaje podatkov, brez sledenja. Tvojo natančno lokacijo uporabimo le, ko uporabiš funkcijo, ki jo potrebuje, svoj račun in vse njegove podatke pa lahko kadar koli izbrišeš v aplikaciji.

1. Kdo smo

Aplikacijo Velogether upravlja Računalniške dejavnosti Matic Krašek s.p., Zaloše 11, 4244 Podnart, Slovenija (»mi«). Smo upravljavec tvojih osebnih podatkov.

Vprašanja in zahteve glede zasebnosti: privacy@velogether.com

2. Na kaj se politika nanaša

Ta politika velja za mobilno aplikacijo Velogether, storitve v ozadju prijavo na zgodnji dostop na naši spletni strani (glej »Prijava na spletni strani« v poglavju 3), stran za pomoč na naši spletni strani (glej »Pomoč in podpora« v poglavju 3) in stran za testerje pred izidom (glej »Stran za testerje« v poglavju 3). Za uporabo moraš imeti vsaj 18 let. Otroci se lahko s staršem udeležijo družinskih voženj, vendar nimajo računov in o njih ne zbiramo ničesar razen števila otrok, ki jih pripelje družina (glej poglavje 3).

3. Katere podatke zbiramo in zakaj

Tvoj račun

E-poštni naslov: za prijavo z enkratno kodo in za sporočila o tvojem računu.
Ime in priimek: drugi kolesarji vidijo tvoje ime in začetnico priimka, prijatelji pa celo ime in priimek.
Datum rojstva: za preverjanje, da imaš vsaj 18 let. Drugim ni nikoli prikazan. Če vklopiš »Prikaži mojo starost«, drugi vidijo tvojo starost v letih (privzeto izklopljeno).
Spol (neobvezno): uporabimo ga le zato, da ženske lahko objavljajo vožnje samo za ženske in se jim pridružujejo. Drugim ni nikoli prikazan.
Domače območje: kraj, iz katerega kolesariš, s položajem, zaokroženim na približno 1 km, da ti pokažemo vožnje v bližini. Ime kraja je prikazano na tvojem profilu. Tvojega natančnega domačega naslova na naših strežnikih nikoli ne hranimo.
Kolesarske želje: vrste voženj in zahtevnosti, ki te zanimajo.

Tvoj profil (neobvezno)

Profilna fotografija: vidijo jo vsi ali, če tako izbereš, le kolesarji na isti vožnji, kolesarji iz skupnih voženj in prijatelji.
Kratek opis in jeziki, ki jih govoriš.
Tvoja kolesa: vrsta, znamka, model in drugi podatki, ki jih vneseš. Vidijo jih kolesarji na isti vožnji, kolesarji iz skupnih voženj in prijatelji. Če dodaš znamko ali model, ki ga še ni na našem seznamu, se lahko doda na seznam za vse, brez tvojega imena.
Statistika, izračunana iz tvojih voženj: opravljene vožnje, organizirane vožnje, število različnih ljudi iz skupnih voženj in od kdaj imaš račun.

Vožnje, ki jih objaviš ali se jim pridružiš

Podrobnosti vožnje: vrsta, naslov, čas, opis trase, zahtevnost in drugi podatki, ki jih vneseš.
Zbirno mesto in končna točka: natančna mesta, ki jih izbereš. Natančna mesta vidiš le ti in kolesarji, ki so se pridružili; vsi ostali vidijo območje velikosti približno 1 km.
Trase: trasa, ki jo dodaš vožnji (uvožena iz datoteke GPX ali FIT, predlagana v aplikaciji ali iz tvojih shranjenih tras). Kolesarji, ki so se pridružili, vidijo celo traso; vsi ostali jo vidijo brez približno prvega in zadnjega kilometra, trase, krajše od 3 km, pa se jim sploh ne prikažejo.
Moje trase: trase, ki jih shraniš za pozneje. Vidiš jih le ti, razen če katero deliš: takrat so linija trase, ime, razdalja in vzpon vidni vsem, ki imajo povezavo (v aplikaciji Velogether tudi tvoje ime in začetnica priimka), dokler deljenja ne ustaviš ali trase ne izbrišeš. Tvoje opombe in shranjena zbirna mesta se nikoli ne delijo.
Pridružitve: vožnje, na katerih sodeluješ, za katere prosiš za pridružitev ali čakaš na mesto, in neobvezno sporočilo ob prošnji.
Povabila: katere prijatelje povabiš na vožnjo in ali so se pridružili ali povabilo zavrnili.
Vprašanja (Q&A): vprašanja, ki jih zastaviš na strani vožnje, in odgovori organizatorja ali soorganizatorja. So javna: vidijo jih vsi, ki vidijo vožnjo, z imenom in začetnico priimka osebe, ki je vprašala.
Družinske vožnje: koliko odraslih in otrok pride s tabo. Hranimo le ta števila, o otrocih nič drugega.
Vreme: hranimo napoved za območje zbirnega mesta in čas začetka vsake vožnje. Pri tem ne gre za nobene podatke o tebi.

Na dan vožnje

Potrditev prihoda (»Tukaj sem«): ko pritisneš gumb, telefon enkrat preveri lokacijo. Shranimo čas in oddaljenost od zbirnega mesta v metrih. Tvojih koordinat ne shranimo.
Končano: čas konca vožnje (s pritiskom na gumb ali samodejno ob načrtovanem koncu).
Odgovori organizatorja za kolesarje, ki niso potrdili prihoda (udeležba / pridružitev med potjo / brez udeležbe).
Pozna odjava: če se z vožnje odjaviš manj kot 2 uri pred začetkom, to upoštevamo pri zanesljivosti (glej spodaj).

Po vožnji

Ocene: kolesarji, ki so bili na vožnji, lahko 7 dni ocenjujejo organizatorja in vožnjo (1 do 5 zvezdic in neobvezne oznake). Ocene so anonimne: organizator vidi le povprečje, in to šele, ko so vsaj 3 ocene. Nihče ne vidi, kdo je dal katero oceno.
Je bil organizator tam? Če organizator ni potrdil prihoda, kolesarje vprašamo, ali je bil na vožnji.
Oznake skupine: organizator lahko celi skupini da pozitivne oznake (na primer »odlična skupina«). Štejejo se na profilih vseh, ki so bili na vožnji.
Zanesljivost: iz poznih odjav, neudeležb in organizatorjevih poznih odpovedi v zadnjih 12 mesecih izračunamo oceno zanesljivosti (šele po vsaj 10 vožnjah). Vidiš jo le ti. Če je visoka, te aplikacija najprej prijazno opozori; če je še višja, organizatorji voženj, ki se jim pridružiš, vidijo kratko opombo. Ocena se nikoli ne uporabi za to, da bi ti karkoli onemogočili.

Klepet

Kar pošlješ v klepet vožnje: sporočila, fotografije, lokacije, ki jih deliš, in odzive. Vidijo jih le organizator in kolesarji na tej vožnji.
Do kod je klepet prebran, ali je utišan in ali si ga izbrisal.
Fotografije se pred pošiljanjem pomanjšajo v telefonu. Podatkov o lokaciji v datotekah fotografij (EXIF) ne hranimo. Lokacijo deliš le, ko na zemljevidu izbereš mesto in ga pošlješ.
Svoja sporočila lahko kadar koli izbrišeš; organizator lahko izbriše katero koli sporočilo v klepetu svoje vožnje. Z izbrisanim sporočilom se izbrišejo tudi njegove fotografije.

Prijatelji in obvestila o vožnjah

Prijatelji: tvoja koda za prijatelje (v QR-kodi in povezavi za povabilo), prošnje za prijateljstvo, tvoji prijatelji in o novih vožnjah katerih prijateljev želiš prejemati obvestila.
Povabila: če v 14 dneh po prijavi navedeš, od koga je tvoje povabilo na Velogether, shranimo, od koga je, in kdaj se je povabilo štelo (po 3 vožnjah s 3 različnimi osebami). Oseba, ki te je povabila, vidi le, koliko njenih povabil kolesari, ne pa, kdo.
Zasebna sporočila: sporočila, fotografije, lokacije in odzivi, ki jih pošlješ v zasebnem pogovoru, ter do kod je pogovor prebran in ali je utišan. Vidna so le tebi in osebi, s katero se pogovarjaš. Če prijateljstvo preneha, pogovor ostane, vendar vanj nihče ne more pisati; če nekoga blokiraš, pogovor zate izgine.
Obvestila o vožnjah: obvestila, ki jih nastaviš (na primer »gravel vožnje v razdalji 30 km«), da te lahko obvestimo o novih vožnjah, ki jim ustrezajo.

Varnost: prijave in blokiranje

Prijave: ko prijaviš kolesarja, vožnjo, sporočilo (v klepetu vožnje ali zasebno), vprašanje ali odgovor, shranimo prijavo (razlog in neobvezno opombo) in kopijo prijavljene vsebine, da jo lahko pregledamo, tudi če se pozneje spremeni. Prijavljena oseba nikoli ne izve, kdo jo je prijavil.
Prijave servisnih točk: ko na zemljevidu prijaviš servisno točko (je ni več, pokvarjena, ni servisna točka, napačno mesto), shranimo prijavo s tvojim računom. Drugi kolesarji nikoli ne vidijo, kdo je točko prijavil. Tap na Še je tu le posodobi datum, ko je bila točka nazadnje preverjena.
Servisne točke, ki jih dodaš: položaj, kaj je na voljo, in fotografija, shranjeni s tvojim računom. Drugi kolesarji nikoli ne vidijo, kdo je točko dodal. Fotografija se zmanjša že na telefonu, podatki o lokaciji v datoteki (EXIF) pa se ne ohranijo.
Blokiranje: koga blokiraš. Blokirani kolesarji o tem niso obveščeni.
Odločitve o tvojem računu: če te organizator odstrani z vožnje ali če te po pregledu prijav opozorimo, odstranimo tvojo vsebino ali tvoj račun začasno onemogočimo ali izbrišemo, shranimo odločitev, razlog, naše sporočilo tebi in kopijo odstranjene vsebine. O tem te obvestimo v aplikaciji in po e-pošti, pritožiš pa se lahko v aplikaciji (Profil → Stanje računa) ali z odgovorom na e-pošto.

Pomoč in podpora

Pomoč in odzivi: ko nam pišeš v aplikaciji, shranimo tvoja sporočila in posnetke zaslona, ki jih dodaš, različico aplikacije, model in različico sistema telefona ter jezik aplikacije, da ti lahko odgovorimo in odpravimo težave. Naši odgovori te dosežejo v aplikaciji in po e-pošti.
Obrazec »Prijava ne gre?« na velogether.com/sl/help: tvoje ime, e-poštni naslov tvojega računa, naslov, kjer te lahko dosežemo, in tvoje sporočilo. Uporabimo jih samo za to, da ti pomagamo nazaj v račun; potrdilo in naše odgovore pošljemo na naslov, ki ga navedeš.
Preverjanje, da je račun tvoj: preden račun prenesemo na nov e-poštni naslov, te vprašamo o podatkih v njem (na primer od kdaj imaš račun, o tvojih kolesih ali nedavnih vožnjah). Ob prenosu obvestimo stari in novi naslov.

Obvestila

Žeton za obvestila (naslov tvojega telefona, ki ga dodeli Apple ali Google) skupaj z jezikom in časovnim pasom telefona, da ti obvestila pošljemo v tvojem jeziku in s pravimi časi.
Tvoje nastavitve obvestil in zapis o poslanih obvestilih.

Tvoja lokacija

Aplikacija lokacijo zahteva le med uporabo in le za te funkcije: nastavitev domačega območja, prikaz tvojega položaja na zemljevidu, izbira zbirnega mesta ali končne točke, deljenje lokacije v klepetu in potrditev prihoda. Lokacije nikoli ne uporablja v ozadju in nikoli ne beleži tvojih voženj.

Kamera in fotografije

Aplikacija kamero uporabi le, ko fotografiraš za profil, klepet ali servisno točko ali skeniraš prijateljevo QR-kodo. Ko izbiraš fotografije iz telefona, aplikacija dobi le fotografije, ki jih izbereš. Ko fotografijo iz klepeta shraniš v telefon, jo aplikacija doda v galerijo, ne da bi v njej karkoli brala.

Shranjeno samo v tvojem telefonu

Nekateri podatki nikoli ne zapustijo telefona: tvoja zasebna območja (zasebna lokacija doma in v službi, s katerima te opozorimo, ko je zbirno mesto blizu, in ju izpustimo iz tras, ki jih dodaš), izbrani jezik, enote (km ali milje), svetli ali temni način in barvna tema ter katere spremembe voženj so že pregledane.

Prijava na spletni strani

Če v obrazec »Obvesti me« na velogether.com vpišeš e-naslov, shranimo tvoj e-naslov in to, kar dodaš sam: kraj, vrsto kolesarjenja, ki se ji največ posvečaš, ali želiš testirati aplikacijo, ter jezik strani. Uporabimo jih samo za sporočila o testiranju in izidu ter za izbiro testerjev. Takoj ti pošljemo eno potrditveno sporočilo; povezava »Odstrani me« v njem izbriše tvojo prijavo. Prijava ni povezana z računom v aplikaciji.

Stran za testerje

Pred izidom povabljeni testerji uporabljajo velogether.com/testing. Prijaviš se z računom iz aplikacije (z isto kodo po e-pošti). Shranimo, da si tester (tvoj e-naslov ter ime in jezik, ki ju navedeš), odzive, komentarje in posnetke zaslona, ki jih pošlješ, tvoje »Tudi pri meni«, kljukice na seznamu in čas zadnjega obiska strani. Vsi testerji vidijo vse odzive, komentarje in posnetke zaslona skupaj z imenom pošiljatelja; tvoj seznam vidiva le ti in mi. Podatke uporabimo samo za iskanje in odpravljanje težav pred izidom. Po e-pošti ti pošljemo naše odgovore na tvoje odzive in sporočila, ki jih izberemo za vse testerje. Dokler si na seznamu testerjev, aplikacija beleži tudi, koliko časa jo imaš vsak dan odprto, mi pa štejemo, kaj v njej narediš (organizirane vožnje in pridružitve, potrjene udeležbe kolesarjev, poslana sporočila, ocene, prijave). To so samo števila; tvojih sporočil pri tem ne beremo. Z njimi vidimo, kateri deli aplikacije so preizkušeni in komu se moramo za pomoč najbolj zahvaliti. Posnetek zaslona pokaže vse, kar je bilo na zaslonu, zato ga pred nalaganjem preveri, ali je na njem kaj zasebnega.

Česa ne počnemo

Brez oglasov; tvojih podatkov nikomur ne prodajamo in ne dajemo v najem.
V aplikaciji ni orodij za analitiko ali sledenje.
O tebi ne sprejemamo avtomatiziranih odločitev s pravnimi ali podobno pomembnimi posledicami.

4. Kaj vidijo drugi kolesarji

Vsi: tvoje ime in začetnico priimka, profilno fotografijo (razen če to omejiš), domači kraj, vrste in zahtevnosti voženj, ki so ti všeč, opis, jezike in starost (če jo vklopiš), statistiko, značke, ki jih pokažeš na profilu (razen če jih skriješ; tvoj napredek ostane zaseben), oznake skupin in oceno organizatorja, vožnje, ki jih organiziraš (s približnim območjem zbirnega mesta in traso brez začetka in konca), vprašanja, ki jih zastaviš na vožnjah, ki jih vidijo, oziroma tvoje odgovore kot organizatorja ali soorganizatorja, ter ali si soorganizator vožnje.
Kolesarji na isti vožnji: poleg tega še tvoja kolesa, natančno zbirno mesto, celo traso, kdo se je pridružil in potrdil prihod, odgovore organizatorja o tem, kdo je prišel, in vse v klepetu te vožnje.
Kolesarji iz skupnih voženj: poleg tega še vožnje, ki ste jih opravili skupaj.
Prijatelji: poleg tega še tvoje celo ime in priimek.
Organizatorji voženj, ki se jim pridružiš: kratko opombo, če je tvoja zanesljivost zelo nizka (glej »Po vožnji«).
Drugim kolesarjem nikoli ne pokažemo: tvojega e-poštnega naslova, datuma rojstva, spola, natančnega doma, zasebnih območij, ocene zanesljivosti, posameznih ocen, prijav, blokiranj, nastavitev, tvojih pogovorov z našo podporo in odločitev o tvojem računu.

5. Storitve, ki jih uporabljamo

Za delovanje aplikacije uporabljamo te ponudnike. Podatke obdelujejo v našem imenu in le za navedene namene.

Ponudnik	Za kaj	Podatki	Kje
Supabase	Baza podatkov, prijava, hramba datotek (fotografij), naši strežniki	Vsi zgoraj opisani podatki o računu, vožnjah in klepetih	EU (Frankfurt, Nemčija)
Resend (Resend, Inc.)	Pošiljanje kod za prijavo, sporočil o prijavi na spletni strani, sporočil strani za testerje in sporočil podpore	Tvoj e-poštni naslov; pri sporočilih za testerje in podpore tudi njihovo besedilo	ZDA
Expo (650 Industries, Inc.)	Dostava obvestil	Žeton za obvestila, besedilo obvestila	ZDA
Google Firebase Cloud Messaging / Apple Push Notification service	Dostava obvestil na Android / iPhone	Žeton za obvestila, besedilo obvestila	ZDA / po svetu
Photon (komoot)	Iskanje krajev in imena krajev	Iskalno besedilo ali položaj izbrane točke; tvoj IP-naslov	Nemčija
Overpass API (OpenStreetMap)	Predlogi javnih zbirnih mest	Območje zemljevida okoli zbirnega mesta; tvoj IP-naslov	Nemčija
OpenFreeMap	Slike zemljevida	Območje zemljevida, ki ga gledaš; tvoj IP-naslov	EU
GraphHopper	Predlogi tras	Začetna in končna točka, ki ju postaviš, vrsta vožnje in želena razdalja. Pošljejo jih naši strežniki, brez tvojega imena ali IP-naslova	Nemčija
MET Norway (Norveški meteorološki inštitut)	Vremenske napovedi za vožnje	Območje zbirnega mesta, zaokroženo na približno 1 km. Pošljejo ga naši strežniki, brez kakršnih koli podatkov o kolesarjih	Norveška
Vgrajeno iskanje naslovov v telefonu (Google ali Apple)	Imena krajev, kadar zgornje ni na voljo	Položaj točke	Odvisno od telefona

Kadar podatki zapustijo EU in EGP (Resend, Expo, Google, Apple), je prenos zaščiten s standardnimi pogodbenimi klavzulami EU ali z okvirom EU–ZDA za zasebnost podatkov.

Ko pri zbirnem mestu ali deljeni lokaciji tapneš »Odpri v Zemljevidih«, se točka odpre v tvoji aplikaciji za zemljevide ali v Google Zemljevidih, kjer velja njihova politika zasebnosti.

6. Pravne podlage

Izvajanje storitve, ki jo uporabljaš (člen 6(1)(b) GDPR): račun in profil, vožnje, trase, pridružitve, povabila, potrditev prihoda, klepet, vprašanja (Q&A), prijatelji, obvestila o vožnjah in druga obvestila ter pomoč in podpora (tudi pomoč pri vrnitvi v račun).
Naši zakoniti interesi (člen 6(1)(f)): varno, zaupanja vredno in zanesljivo delovanje aplikacije, preprečevanje zlorab in preverjanje starosti 18+. Sem spadajo ocene, oznake skupin, ocena zanesljivosti, prijave, blokiranje ter opozorila, odstranitve in začasne zapore: kolesarjem pomagajo vedeti, kaj lahko pričakujejo, in skrbijo za varnost na vožnjah. Temu lahko ugovarjaš (glej poglavje 8).
Zakonske obveznosti (člen 6(1)(c)): obvestilo, zakaj smo odstranili tvojo vsebino ali omejili tvoj račun, in obravnava tvoje pritožbe, kot zahteva Akt EU o digitalnih storitvah.
Tvoja privolitev (člen 6(1)(a)): neobvezni podatki, kot je spol, ter dovoljenja za lokacijo, kamero, fotografije in obvestila v telefonu. Privolitev lahko kadar koli prekličeš v aplikaciji ali v nastavitvah telefona. Sem spada tudi prijava na spletni strani: prekličeš jo s povezavo »Odstrani me« v potrditvenem sporočilu ali tako, da nam pišeš. In stran za testerje: sodeluješ prostovoljno in kadar koli nas lahko prosiš, da te odstranimo.

7. Koliko časa hranimo podatke

Račun, profil, vožnje, potrditve prihoda, ocene: dokler imaš račun. Sestavljajo tvojo zgodovino voženj.
Shranjene trase, kolesa, prijatelji, obvestila o vožnjah: dokler jih ne izbrišeš ali ne izbrišeš računa.
Zasebna sporočila s fotografijami: izbrišemo jih po 2 letih. Svoja sporočila lahko kadar koli izbrišeš; izbris pogovora ga počisti le zate.
Klepeti voženj s fotografijami, lokacijami in odzivi ter vprašanja (Q&A): izbrišemo jih 12 mesecev po vožnji. Sporočilo ali vprašanje, ki ga izbrišeš, se odstrani takoj. Ko je vožnja mimo, lahko njen klepet izbrišeš s seznama: počisti se le zate, drugi kolesarji ga obdržijo.
Zanesljivost: šteje le zadnjih 12 mesecev.
Zapisi o poslanih obvestilih: izbrišemo jih po 90 dneh.
Prijave: hranimo jih 2 leti po obravnavi, da lahko prepoznamo ponavljajoče se zlorabe, tudi če so bili vpleteni računi izbrisani.
Prijave servisnih točk: izbrišemo jih 1 leto po obravnavi.
Pogovori s podporo (sporočila in posnetki zaslona, iz aplikacije ali s strani za pomoč): izbrišemo jih 2 leti po zaključku pogovora.
Odločitve o tvojem računu (opozorila, odstranitve, začasne zapore): 2 leti in ves čas, ko zapora traja, oziroma dokler ne izbrišeš računa.
Zapis o ukrepih naše ekipe (na primer kdo je onemogočil račun in zakaj, kar lahko vključuje ime računa in pri računu, ki smo ga izbrisali, tudi njegov e-poštni naslov): 2 leti, da lahko prepoznamo ponavljajoče se zlorabe.
Kopije e-pošte, ki ti jo pošlje naša podpora: 90 dni.
Žeton za obvestila: dokler se na tem telefonu ne odjaviš ali ne izbrišeš računa.
Prijave na spletni strani: do 1. junija 2027 (3 mesece po izidu) ali dokler ne tapneš »Odstrani me« v potrditvenem sporočilu.
Stran za testerje: vse, tudi posnetki zaslona in čas v aplikaciji, do 1. junija 2027 (3 mesece po izidu). Svoj odziv lahko izbrišeš, dokler nanj ne odgovorimo, komentarje pa kadar koli.
Ko izbrišeš račun, izbrišemo tvoj profil in profilno fotografijo, kolesa, vožnje, ki jih organiziraš, tvoje pridružitve, potrditve prihoda, ocene, sporočila in fotografije v klepetih, zasebne pogovore, vprašanja, shranjene trase, prijatelje, obvestila o vožnjah, blokiranja in nastavitve, pogovore s podporo in odločitve o tvojem računu ter tvoje odzive in komentarje na strani za testerje. Prihajajoče vožnje, ki jih organiziraš, najprej odpovemo, da so kolesarji obveščeni. Tvoje dodane servisne točke s fotografijami ostanejo na zemljevidu, brez povezave s tabo. Izbrisani podatki lahko še kratek čas ostanejo v varnostnih kopijah našega ponudnika gostovanja, dokler niso prepisani.

8. Tvoje pravice

Po GDPR imaš pravico do dostopa do svojih podatkov, popravka, izbrisa, omejitve obdelave, ugovora obdelavi in prenosljivosti podatkov.

Popravek: Profil → Uredi profil. E-pošta: Profil → Nastavitve → E-pošta (kodo pošljemo na novi naslov, stari pa obvestimo o spremembi).
Izbris: Profil → Nastavitve → Izbriši račun. Vse se izbriše takoj. Brez aplikacije: velogether.com/sl/help/#delete.
Prijava ne gre: uporabi obrazec na velogether.com/sl/help.
Ugovor (na primer oceni zanesljivosti): piši nam in obdelavo bomo ustavili, razen če imamo za to tehten razlog, kot je varnost kolesarjev.
Vse ostalo (na primer kopija tvojih podatkov): piši na privacy@velogether.com. Odgovorimo v enem mesecu.

Pritožbo lahko vložiš tudi pri slovenskem nadzornem organu: Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, ali pri nadzornem organu v svoji državi EU.

9. Varnost

Podatki se prenašajo šifrirano (HTTPS). Na naših strežnikih pravila dostopa zagotavljajo, da vsak kolesar vidi le tisto, kar sme (na primer natančna zbirna mesta le kolesarji na tej vožnji). Fotografije iz klepetov so shranjene zasebno, povezave, s katerimi jih aplikacija prikaže, pa po eni uri prenehajo delovati. Podatke o računu, ki jih potrebujejo za podporo in obravnavo prijav (na primer tvoj e-poštni naslov ali prijavljeno sporočilo), vidijo le člani naše ekipe, ki to delo opravljajo; kaj sme vsak od njih, je omejeno, vsak ukrep pa se beleži. Noben sistem ni popolnoma varen; če bi kršitev varnosti podatkov vplivala nate, bomo o tem obvestili tebe in pristojne organe, kot zahteva zakon.

10. Spremembe politike

Ob spremembi politike posodobimo datum na vrhu. O pomembnih spremembah te obvestimo v aplikaciji, preden začnejo veljati.

11. Kontakt

Računalniške dejavnosti Matic Krašek s.p., Zaloše 11, 4244 Podnart, Slovenija
privacy@velogether.com